"M왯 t d Z ddlZddlZddlZddlmZ ddlmZmZ ddl m
Z
ddl m Z m
Z
ddlmZ ddlmZ dd lmZ dd
lmZmZ dd lmZ dd lmZmZ dd
l m Z ddl m Z ddl m!Z" ddl#m$Z$ ddl%m&Z& ej' e( Z)e G d d Z* G d d Z+ dde,e dededz fdZ-dS )u
This program is free software: you can redistribute it and/or modify it under
the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License,
or (at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
See the GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
Copyright © 2019 Cloud Linux Software Inc.
This software is also available under ImunifyAV commercial license,
see
N)suppress)asdict dataclass)Path)ListOptional)Malware)UserType)TheSink)antivirus_mode safe_fileops)CleanupRevertInitiator)MalwareHitStatusMalwareScanResourceType)
MalwareHit)
is_crontab)restore)
MalwareAction hash_pathc e Zd ZU eed< eed< eed< ej Zeed< dZe ed< dZ
e ed< dZ eed < dZ eed
< dZ
e ed < dZe ed < dZe ed
< dZe ed< eZdS )
RestoreReportfilescan_idowner initiator
cleaned_at reverted_at hash_before_reverthash_after_revertmtime_before_revertmtime_after_revertsize_before_revertsize_after_revertN)__name__
__module__ __qualname__str__annotations__r
ROOTr r floatr r! r" r# r$ r% r& r to_dict T/opt/imunify360/venv/lib/python3.11/site-packages/imav/malwarelib/cleanup/storage.pyr r 0 s
III
LLL JJJ ]Is"""JK s !#### """" """" !u!!!GGGr0 r c b e Zd ZU dZ eej Zeed< e ddedefd Z
e de de fd Z
e d
Ze d Ze d Ze d
edefd Ze ddee dee fd Ze dededefd Ze dedefd ZdS )CleanupStoragez@
Store files before cleanup and restore them by request
pathFsrcdstc ~ K t j t | t | dd|| d {V d S )NFT)
src_unlink
dst_overwritesafe_srcsafe_dst)r
safe_mover* )r5 r6 r: r; s r1 _copyzCleanupStorage._copyI sf $ HH HH
r0 filenamereturnc t | S )zN
Get file name for cleanup storage
:return: file name
r )clsr> s r1 storage_namezCleanupStorage.storage_nameT s """r0 c F | j | |j z S N)r4 rB orig_file)rA hits r1 get_hit_store_pathz!CleanupStorage.get_hit_store_path\ s x#**3=9999r0 c K |j }| | }t | }| |||d d {V d S NT)r: r; )orig_file_pathrG r r= )rA rF r5 r6 r: s r1 storezCleanupStorage.store` s^ $$S)) c??iiS8diCCCCCCCCCCCr0 c K | j s| j d t t t }}}|D ]} | | d {V | | 4# t $ r | | Y Ut t j f$ rz}t dt | | | | t j |j |j |j |j d {V Y d }~d }~ww xY w|||fS )N z-Failed to store file before cleanup: %r -- %sr4
file_owner file_user signature_id)r4 existsmkdirsetrK addFileNotFoundErrorOSErrorr
UnsafeFileOperationloggerwarningr* r cleanup_failed_storerE r userrQ )rA hits succeeded not_existfailedrF es r1 store_allzCleanupStorage.store_allg s x " HNN5 ! ! !'*uuceeSUUf9 C
iinn$$$$$$$
c""""$
#
#
#
c"""""\ =>
CHH
3#8 "y !h!$!1
&)++s %0B E7E A0EErF c K t |j |j |j }| | }|j }t
| }t t 5 | j
|_ d d d n # 1 swxY w Y t t 5 | }|j
|_ |j
|_ t j | }||_ d d d n # 1 swxY w Y | ||d| d {V t+ j |_ t t 5 | }|j
|_ |j
|_ t j | } | |_ d d d n # 1 swxY w Y |S rI )r rE scanid_idr\ rG rJ r r rV statst_mtimer r# st_sizer% hashlibsha256
read_bytes hexdigestr! r= timer r$ r& r" )
rA rF reportr5 r6 r; st_before hash_beforest_after
hash_afters
r1 r zCleanupStorage.restore sg s}cmSXFF$$S)) c??
'
(
( 4 4 #
3F 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 '
(
( 4 4
I)2);F &(1(9F %!. )9)9::DDFFK(3F % 4 4 4 4 4 4 4 4 4 4 4 4 4 4 4 iiS4(iCCCCCCCCC !Y[[
'
(
( 2 2xxzzH(0(9F %'/'7F $ (8(899CCEEJ'1F $ 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2
s8 " B
BB,A,D$$D(+D(:A,G22G69G6Nr] r c D K t t }}|D ]} | | d {V }t j |j |j |j |j |pd| d {V | | j# t t j f$ rz}t j |j |j |j |j d {V t dt | | | | Y d }~d }~ww xY w||fS )Nr )r4 rO rP rQ r rm rN z Failed to restore file: %r -- %s)rT r r cleanup_restored_originalrE r r\ rQ rU rW r
rX cleanup_failed_restorerY rZ r* )rA r] r r^ r` rF rm ra s r1 restore_allzCleanupStorage.restore_all sw EE3556 C
"{{3 / ///////#= "y !h!$!1 'o2!
c""""\ =>
#: "y !h!$!1 A3s88QOOO
3
& s A&B D!A0DDkeepc t K | }|j |k r| dS dS )NTF)re rf unlink)rA r4 rv sts r1 _clearzCleanupStorage._clear s7
YY[[
; KKMMM4ur0 c K | j dd d}| j D ]#}| || d{V r|dz
}$|S )zj
Clear storage
:param keep: keep files after specified timestamp
:return:
rM T)exist_okr N )r4 rS iterdirrz )rA rv clearedr4 s r1 clearzCleanupStorage.clear sy ut,,,H$$&& DZZd++++++++
1 r0 )FFrD ) r' r( r) __doc__r ConfigCLEANUP_STORAGEr4 r+ staticmethodr= classmethodr* rB rG rK rb r r r r r ru r- boolrz intr r/ r0 r1 r3 r3 B s f,--D$---
D
\
#C #C # # # [# : : [: D D [D , , [,8
} [ < @D! !
#!08
! ! ! [!: E d [ u [ r0 r3 r] sinkr c K d | D }t || d {V \ }}t j |t j t j r t j | || d {V ||fS )Nc F g | ] }|j t j j k | S r/ )
resource_typer FILEvalue).0rF s r1
z restore_hits.. s7 7 < B B B B B Br0 )
r3 ru r
set_statusr FOUNDr disabled mds_restore restore_hits)r] r r file_hitsr^ r` s r1 r r s
I
- 8 8I N NNNNNNNIv)%5%;<<< >&tT9========= f r0 rD ).r rh loggingrl
contextlibr dataclassesr r pathlibr typingr r defence360agent.contracts.configr r r
"defence360agent.internals.the_sinkr defence360agent.utilsr r
imav.malwarelib.cleanup.typesr imav.malwarelib.configr r imav.malwarelib.modelr imav.malwarelib.scan.crontabr imav.malwarelib.scan.mdsr r imav.malwarelib.subsys.malwarer imav.malwarelib.utilsr getLoggerr' rY r r3 listr r/ r0 r1 r s' * ) ) ) ) ) ) ) ) ! ! ! ! ! ! ! ! > > > > > > 5 5 5 5 5 5 6 6 6 6 6 6 > > > > > > > > @ @ @ @ @ @ - , , , , , 3 3 3 3 3 3 ; ; ; ; ; ; 8 8 8 8 8 8 + + + + + + 8 $ $ "T T T T T T T Tt 04
z
&, r0